define sec_config ( $filename, $pattern, $desc )

{
    file { "$filename":
        mode       => 644, owner => root, group => root,
        ensure     => present,
        path       => "/etc/sec/$filename",
        require    => Exec["sec_conf_dir"],
        content    => template("sec/config.erb"),
    }

}

class sec::conf  {

    exec { "sec_conf_dir":
        command  => "mkdir /etc/sec",
        creates  => "/etc/sec",
    }

    sec_config { "$sec_filename":
        filename => "$sec_filename",
        desc     => "$sec_desc",
        pattern  => "$sec_pattern",
    }
}